Privacy Policy

Information We Collect

Account and organization information

When you use Nibbleful, we may collect:

• Account details such as email address and authentication credentials
• Organization, team, and membership information
• Billing and payment-related details processed by Stripe (we do not store full card numbers)
• API keys, public ingest tokens, and collection configuration you create
• JSON records and other data you store in Collections
• Usage, request, and billing activity needed to operate and meter the service

Technical information

We automatically collect certain technical information when you use our application:

• IP address, browser, and user agent information
• Device type and operating system
• Request metadata such as endpoints, status codes, and timing
• Error logs and performance data

How We Use Your Information

We use the information we collect to:

• Provide and maintain the Nibbleful service
• Store, process, and deliver your Collections and API traffic
• Authenticate access, enforce permissions, and protect public ingest endpoints
• Meter usage, maintain prepaid balances, and process payments
• Improve functionality, reliability, and user experience
• Respond to inquiries and provide customer support
• Ensure the security and integrity of our service
• Comply with legal obligations

Data Storage and Security

We take the security of your information seriously:

• Data is encrypted in transit and protected at rest using industry-standard practices
• Access to systems is restricted to authorized personnel
• We regularly review and update our security practices
• Your data is stored on secure, reputable cloud infrastructure
• Sensitive credentials such as private API key secrets are not shown again after creation

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With your explicit consent
• To comply with legal requirements or court orders
• To protect our rights, property, or safety, or that of our users
• With trusted service providers who help operate the service, such as Stripe for payments and hosting providers (under appropriate confidentiality and security obligations)
• In connection with a business transfer or acquisition

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we have about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of how we process your information
• Objection: Object to certain types of data processing

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your account and associated data. Some billing, audit, and request-history records may be retained for a limited period for legitimate business purposes or legal compliance.

Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and operate the application. You can control cookie settings through your browser, though some features may not function properly if cookies are disabled.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: